AuthenticationLoginLogin POST /api/v1/auth/login User login endpoint. Returns JWT access and refresh tokens, and sets HttpOnly cookies. Rate limited: 20/min per IP, 5/min per email (Issue #67 security hardening). Request Responses200400429OKBad RequestToo Many Requests